Privacy Policy

Effective date: October 21, 2026

Minor App Tech ("we", "our", or "us") operates the Cloud Storage mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our App.

By creating an account or using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

• Guest account — if you start using the App without signing in, Firebase Authentication creates a guest account that is identified only by a random account ID. We do not collect a name or email address for a guest account.
• Email address — provided during account registration or by Google when you sign in with Google, used for authentication, password recovery, and the service emails described in Section 5.
• Display name — provided by your Google account when you sign in with Google, or set by you in your profile.
• Files, photos, and videos you upload — any files you choose to upload to the cloud storage service, and the folders you organize them in. These are stored on our servers.
• File metadata — file names, sizes, types, folder structure, and upload dates associated with your uploaded files.
• Account status — your storage plan, the storage you use, whether your email address is verified, and the dates your account was created, last signed in, and last used the App (recorded by Firebase Authentication). We use this to apply your plan's storage limit and the rules described in Section 5.
• App language — the language the App is set to, saved to your account so that service emails are sent in that language.
• Purchase history — if you buy a subscription or start a free trial, records of your purchases, free trials, and subscription status are processed by Google Play Billing and by RevenueCat, our subscription-management service provider. When you are signed in (not as a guest), the App also identifies you to RevenueCat by your account ID so it can check which plan you have, even if you never buy anything. We never see your full payment card details; payments are handled by Google Play.
• App integrity information — when the App connects to our services (file storage, database, and server functions), it uses Firebase App Check with the Google Play Integrity API to show that requests come from our genuine, unmodified App as distributed through Google Play. For this check, Google Play processes information such as the App's package name, version, and signing certificate, the App's license status, and device attestation information. Our servers receive only a token that confirms the check passed.
• App usage analytics — Google Analytics for Firebase automatically collects an app-instance ID, the Android advertising ID, a masked IP address (used to derive coarse location), app lifecycle events such as screen views and sessions, and in-app purchase and subscription events (product ID, name, and price). The App also records a small set of in-app actions: starting as a guest; signing up or signing in (whether email or Google was used, and whether the account was created from a guest account); moving a guest account's files into an existing account (how many files were moved and how many did not fit); completing an upload; opening the upgrade screen (and whether it was opened from an upgrade button, after sign-up, or from a storage notice); starting a subscription purchase (plan ID, monthly or yearly billing, and whether it starts with a free trial); seeing a storage notice (its type); and deleting an account. These events contain no file names, file contents, or email addresses. We use this to understand how the App is used and to improve it.
• Advertising and diagnostics data — on the free plan (including guest accounts), the App shows ads served by Google. The Google Mobile Ads SDK automatically collects and shares with Google: your IP address (which may be used to estimate your approximate location), ad and app interactions (such as app launches, taps, and video views), diagnostic information (such as app launch time and performance), and device and account identifiers including the Android advertising ID and app set ID. This is used for advertising, analytics, and fraud prevention. Paid plans and free trials do not show ads.
• Messages you send us — if you send feedback or email us, we receive your email address and your message and, for feedback sent from the App, your rating, the feedback category, the App version, and the Android version.

2. How We Use Your Information

We use the collected information for the following purposes:

• To create and manage your account, including guest accounts, and to move a guest account's files into your account when you sign in.
• To provide the cloud storage service — storing, retrieving, and managing your files.
• To authenticate your identity and protect your account.
• To send password reset and email verification emails when requested.
• To send service emails about your storage: warnings when your files exceed your plan's storage limit, notices before files are deleted because an account was not used, and confirmations after files were deleted (see Section 5). We do not send marketing emails.
• To provide and manage subscriptions and free trials (unlock your plan's storage, restore purchases).
• To show ads on the free plan, with your consent where required by law.
• To enforce storage limits and keep the service reliable and secure.
• To protect our services from abuse and fraud, using Firebase App Check.
• To understand how the App is used and improve it, through app usage analytics.

3. How We Store Your Data

Your data is stored on Google's Firebase infrastructure (Firebase Authentication, Cloud Firestore, and Firebase Storage) and processed by Cloud Functions for Firebase, which are part of Google Cloud Platform. All data is encrypted in transit using HTTPS/TLS, and Google encrypts data at rest on its servers using AES-256 with keys managed by Google.

Your files and metadata are isolated to your account: Firebase Security Rules let only your signed-in account open them in the App. If you share a link to a file, anyone who has the link can open and download that file without signing in. The link keeps working until the file is permanently deleted, including while the file is in Trash. To stop a shared link from working, permanently delete the file from Trash. Links shared from a guest account stop working when its files are moved into another account.

4. Data Sharing

We do not sell your personal data to third parties.

We do not share your personal data with third parties except:

• Firebase / Google Cloud — our infrastructure provider that processes and stores your data on our behalf. Firebase's privacy practices are governed by Google's Privacy Policy.
• Google (analytics) — Google Analytics for Firebase processes the app usage data described in Section 1 on our behalf. See How Google uses information from sites or apps that use its services.
• Google (advertising) — on the free plan, the Google Mobile Ads SDK shares the advertising data described in Section 1 (approximate location derived from IP address, ad and app interactions, diagnostics, and device identifiers including the advertising ID) with Google for advertising, analytics, and fraud prevention. See How Google uses information from ads.
• Google Play (app integrity) — performs the integrity check described in Section 1 when the App connects to our services. See Google's Privacy Policy.
• RevenueCat — our subscription-management provider, which receives your account ID when you are signed in and processes your purchase history on our behalf to check and manage your plan. See the RevenueCat Privacy Policy.
• Email delivery provider — the service provider that sends our service emails receives your email address and the content of each email, only to deliver it on our behalf. It may keep delivery records for a limited time under its own retention policy.
• People you share files with — anyone who receives a file link you share can open and download that file (see Section 3).
• Legal requirements — we may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

5. Data Retention and Deletion

We retain your data for as long as your account exists, except as described in this section. Files you delete in the App are moved to Trash and permanently removed after 30 days (or immediately if you empty the Trash).

• Guest accounts — a guest account and its files are deleted automatically after 30 days without use of the App. A guest account cannot be recovered once the App is uninstalled or its data is cleared; it is then deleted after 30 days. When you sign in to an existing account from a guest account that has files, the guest's files are moved into that account, oldest first, as far as that account's remaining storage allows; the guest account is then deleted together with the files that did not fit and the files in its Trash.
• Storage over your plan's limit — if your stored files exceed your plan's storage limit (for example, after a subscription or free trial ends) and your email address is verified, we email you a warning with a date at least 90 days later. If your storage is still over the limit after that date, we delete files until it is within the limit: files in Trash first, then your most recently uploaded files. Accounts without a verified email address do not receive these emails and their files are not deleted under this rule. See Section 7 of our Terms of Service.
• Accounts not used for 12 months — if an account without an active plan is not used for 12 months, the files and folders in it are deleted; the account itself is kept. We email verified addresses at least 30 days before. See Section 8 of our Terms of Service.
• Dates — dates in our emails and in the App are calendar dates in Coordinated Universal Time (UTC). Files are deleted only after the stated date has ended in every time zone.

When you delete your account, the following data is permanently deleted immediately:

• Your sign-in credentials (email and password, or your Google sign-in).
• All files you uploaded to the cloud storage.
• All file metadata (names, sizes, dates).
• All folders and your user profile data.
• Your account status records (plan, storage usage, and the service emails we sent you).

We also ask RevenueCat to delete its customer record for your account.

Subscriptions: deleting your account does not cancel an active subscription. Subscriptions are billed by Google Play and must be cancelled in the Play Store under Payments & subscriptions.

Account deletion is available within the App (Profile → Delete Account) and via our web page at https://cloud-storage-f0662.web.app. A guest account has no email address or password, so it cannot be deleted through the web page: delete it in the App (Profile → Delete guest data), or it is deleted automatically after 30 days without use.

Some records are not deleted with your account: Google Play keeps its purchase and transaction records; Google keeps app usage analytics and advertising data, which are not linked to your account, for the retention periods of those services; and our email provider keeps delivery records for a limited time. These records are kept for billing, security, fraud prevention, and legal compliance.

6. Your Rights

You have the right to:

• Access your data — your files and profile are visible within the App at any time.
• Delete your data — you can delete individual files, delete a guest account and its files (Profile → Delete guest data), or delete your entire account and all associated data.
• Export your data — you can download your files from the App at any time.
• Update your credentials — you can reset your password via the Forgot Password feature.
• Manage ads consent — where consent-based ads apply (for example, in the EEA/UK), you can review or withdraw your consent at any time in the App under Profile → Privacy options.
• Reset your advertising ID — you can reset or delete your Android advertising ID at any time in your device settings (Settings → Privacy → Ads).

7. Children's Privacy

Our App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such information promptly.

8. Security

We implement appropriate security measures to protect your data:

• All network communication is encrypted via HTTPS.
• Authentication is handled by Firebase Authentication with secure token management.
• Access to your files through the App is limited to your signed-in account by Firebase Security Rules; a share link you create opens that one file for anyone who has the link (see Section 3).
• Some of our server functions use Firebase App Check (Google Play Integrity) to refuse requests that do not come from our genuine App.
• The App does not save your password on your device. Your sign-in session and a copy of your file list are kept in the App's private storage, which Android protects from other apps.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Third-Party Services

The App uses the following third-party services that may collect information:

• Firebase Authentication & Google Sign-In — for user sign-in, guest accounts, and account management.
• Firebase Cloud Firestore — for storing file and folder metadata and account status.
• Firebase Storage — for storing uploaded files.
• Cloud Functions for Firebase — for server-side features such as storage limits, guest accounts, and service emails.
• Firebase App Check & Google Play Integrity API — for protecting our services from abuse.
• Firebase Remote Config — for delivering app configuration.
• Google Analytics for Firebase — for app usage analytics.
• Google Mobile Ads (AdMob) & Google User Messaging Platform — for showing ads on the free plan and collecting the legally required consent.
• Google Play Billing & RevenueCat — for processing and managing subscriptions.
• Email delivery provider — for sending service emails.

Except for RevenueCat and our email delivery provider, these services are provided by Google and are subject to Google's Privacy Policy and Firebase Terms of Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this page periodically for any changes.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: